cmdLabs > :: Incident Response

Page Options

Incident Response

Information security incidents can leave an organization open to greater risk so long as the event continues. This risk can lead to financial penalties, critical data loss, legal exposure and bad publicity. This surge in risk can be mitigated with a timely and effective Incident Response.

At cmdLabs, we are highly experienced at containing and remediating information security incidents, and closing the associated window of elevated risk. We have responded to incidents ranging from PII/PCI data breaches and insider fraud, to repeated intrusions from advanced persistent threats. We have also led and served on incident response teams for enterprise-scale incidents involving hundreds of compromised hosts, and large volumes of stolen data. Our track record includes work with law firms, higher education, local and Federal government agencies, non-profits and companies in the Fortune 500.

Our Incident Response services include:

Preparation: We can analyze your current response capabilities, and help you to bring your organization to a heightened state of readiness. This will ensure more rapid and effective response to future incidents, and by extension, lower costs associated with security events.

Investigation: We can investigate an incident to determine the nature of the event, the scope of unauthorized activities, and a quantification of data losses and damage incurred.

Containment: We can plan and execute additional security measures designed to stop the spread of an incident and halt unauthorized activity, thereby preventing additional damage and loss.

Remediation: We can assist you removing the affects of a security event, and in returning your information systems to an acceptable state of trust so that you can resume business.

Prevention: We can help you to reduce future risk by utilizing lessons learned from an incident to prevent similar events from occurring again.

Management: We can manage all facets of your response to an incident to help you maximize effectiveness, minimize losses and control cost.

Technical Support: We can perform specific technical tasks to support your incident response efforts, ranging from the forensic analysis of potentially compromised systems and malicious code to network monitoring.